# Plonky2 SHA256 Benchmarks

SHA256 hash of a 1KB input message.

| Circom (witnesscalc+rapidsnark)[^2] | Plonky2[^3] |
| -------- | -------- |
| 723.6+-12 ms[^1] | 4033.8+-48 ms[^1] |

Benchmarks run on iPhone 13 Pro.

SHA256 circuit was chosen as an example of a non-trivial circuit used in performance-demanding client-side applications like ZK-Email.

Plonky2 SHA256 is implemented naively without the use of lookups.

[^2]: [Circom source code](https://github.com/alxkzmn/circom-mobile-benchmark/tree/main)
[^3]: [Plonky2 source code](https://github.com/alxkzmn/plonky2-mobile)
[^1]:[Calculations](https://docs.google.com/spreadsheets/d/1WbW7ExQKi7z6c7aKdrusx49EqZBf4bTxxCKp0T6kWJc/edit?usp=sharing)